662 matches found
CVE-2023-30547
CVE-2023-30547 Descripción de la vulnerabilidad vm2 es un sandbox que puede ejecutar código no confiable con los módulos integrados de Node en lista blanca. Existe una vulnerabilidad en la sanitización de excepciones de vm2 para versiones hasta la 3.9.16, que permite a los atacantes lanzar una...
vm2
vm2 !NPM Versionnpm-imagenpm-url !NPM Downloadsdownloads-imagedownloads-url !Licenselicense-imagelicense-url !Known Vulnerabilitiessnyk-imagesnyk-url vm2 es un sandbox que puede ejecutar código no confiable con los módulos integrados de Node permitidos en la lista blanca. Instalaciónsh npm instal...
CVE-2023-30547
CVE-2023-30547 vm2 es un sandbox que puede ejecutar código no confiable con los módulos integrados de Node en la lista blanca. Existe una vulnerabilidad en la sanitización de excepciones de vm2 para versiones hasta la 3.9.16, que permite a los atacantes lanzar una excepción de host no sanitizada...
CVE-2022-36067-vm2-POC-webapp
CVE-2022-36067-vm2-POC-webapp Pasos para reproducir 1. instala vm2 globalmente primero npm -install [email protected] -g 2. ejecuta: node index.js 3. visita http://localhost:5000/poc 4. Sube el archivo poc como poc2.js o código y observa RCE...
CVE-2023-30547
CVE-2023-30547 PoC利用——VM2沙箱逃逸漏洞 alt img 描述 vm2 3.9.17 因异常清理机制缺陷而存在任意代码执行漏洞。攻击者可通过在 handleException 中触发未清理的主机异常来利用此漏洞，从而逃逸沙箱并在主机上下文中执行任意代码。 VM2-Exploit ⚠️ 建议使用 "VM2-Exploit " 工具，该工具可用来利用 所有版本 的 VM2，且易于使用。 判断目标是否存在漏洞 在沙箱中运行以下代码，判断目标是否存在漏洞。 root@kitploit: const version =...
Node_CVE-2023-29017
CVE-2023-29017 | Ejecución remota de código mediante escape de sandbox vm2 WHS 4th 31st Class - Kim Geonwoo @gunwoo105 Resumen de la vulnerabilidad vm2 es una biblioteca de sandbox para Node.js que permite ejecutar JavaScript no confiable en un entorno restringido. En condiciones normales, el...
ROOT-APP-NPM-CVE-2026-47137 CVE-2026-47137 in vm2 - Patched by Root
Root has patched CVE-2026-47137 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-AIKIDO-2026-10846 AIKIDO-2026-10846 in vm2 - Patched by Root
Root has patched AIKIDO-2026-10846 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-AIKIDO-2026-10726 AIKIDO-2026-10726 in vm2 - Patched by Root
Root has patched AIKIDO-2026-10726 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-AIKIDO-2026-10723 AIKIDO-2026-10723 in vm2 - Patched by Root
Root has patched AIKIDO-2026-10723 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-45411 CVE-2026-45411 in vm2 - Patched by Root
Root has patched CVE-2026-45411 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-44006 CVE-2026-44006 in vm2 - Patched by Root
Root has patched CVE-2026-44006 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-43997 CVE-2026-43997 in vm2 - Patched by Root
Root has patched CVE-2026-43997 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-AIKIDO-2026-10843 AIKIDO-2026-10843 in vm2 - Patched by Root
Root has patched AIKIDO-2026-10843 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-44003 CVE-2026-44003 in vm2 - Patched by Root
Root has patched CVE-2026-44003 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-AIKIDO-2026-10716 AIKIDO-2026-10716 in vm2 - Patched by Root
Root has patched AIKIDO-2026-10716 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-26956 CVE-2026-26956 in vm2 - Patched by Root
Root has patched CVE-2026-26956 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-AIKIDO-2026-10721 AIKIDO-2026-10721 in vm2 - Patched by Root
Root has patched AIKIDO-2026-10721 in the vm2 package for Root:npm. Multiple fixed versions available...